Privacy policy

This policy explains what personal data the Ranalo app (my.ranalocredit.com and the Ranalo app on Google Play) uses, why, who it is shared with, and your rights under Kenya's Data Protection Act, 2019. Ranalo Credit Ltd is the data controller.

What we use

• Your account: account number, name, and the phone or device you are paying for (make, model, IMEI), from your purchase.
• Your contact details: email, M-Pesa phone number and national ID number, which you give or confirm in the app.
• Your payments: M-Pesa payments to Pay Bill 4090703 for your account: code, amount, date and time.
• Your contract: amounts due and paid, balance, payment plans, and the lock date of the device.
• Messages: the messages we send to your device (reminders, receipts, updates), shown in the app's Notifications.
• Sign-in and security: sign-in codes (stored only in a scrambled form), when you signed in, wrong codes entered, and the network address used, to keep your account safe.

The app does not read your contacts, photos, messages, location or other apps.

Why we use it

• To run your payment contract: show your balance and payments, and lock or unlock the device as agreed in your contract.
• To let you pay with M-Pesa and to record your payments.
• To send you reminders, receipts and updates, in the app, on your device and, if you give an email, by email.
• To check it is you when you sign in, and to prevent fraud.
• To meet our legal and regulatory duties, such as keeping financial records.

Who we share it with

• Device lock providers (Nuovo, Samsung Knox, Transsion), to send messages to and lock or unlock your financed device.
• Safaricom (M-Pesa), to process your payments.
• Microsoft Azure, which hosts our systems and data.
• Debt collectors working for us, only if your account falls behind and is passed to collections under your contract.
• Authorities, where the law requires it.

We do not sell your data or use it for advertising.

How long we keep it

For as long as your contract runs, and afterwards for as long as the law requires us to keep financial records (usually seven years). Sign-in codes expire after 10 minutes.

How we protect it

The app only works over a secure (HTTPS) connection. Signing in needs a one-time code sent to your financed device. Repeated wrong codes lock app access until we have checked it is you. Our staff see only what they need for their work.

Your rights

You can ask to see the data we hold about you, to correct it, to object to how we use it, or to have it deleted where the law allows. You can correct your email, M-Pesa number and national ID yourself in the app under Details. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Delete your app access

To stop using the app and have your app access and the details you gave in it (email, M-Pesa number, national ID) deleted, email support@ranalocredit.com from the email you gave, or call 0772 007 007, with your account number. We confirm within 14 days. Your payment contract and payment records are kept for as long as the law requires, even after app access is deleted.

Contact

Ranalo Credit Ltd · support@ranalocredit.com · 0772 007 007 · ranalocredit.com